Dashboards & Visualizations

Adding a Workflow Action to a Dashboard

jordanperks
Path Finder

I have been searching all afternoon for the answer to this question and cannot seem to find anything. I have a table within a dashboard that shows the source IP, virus name and sha hash. I want a workflow action to be present within the table so when the hash is clicked it searches for it in VirusTotal. The workflow action is working properly when looking at individual events that are not in a table, but I cannot figure out how to apply it to a table in a dashboard. Is this doable?

sbrant_splunk
Splunk Employee
Splunk Employee

It's doable but not as a "workflow" action. I think a custom drilldown will work for you here.

http://docs.splunk.com/Documentation/Splunk/6.0/AdvancedDev/TableChartDrilldown

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

A Four-Part Event Series: Full Stack Observability For the AI Era

As AI reshapes applications, infrastructure, and the way teams operate, the traditional boundaries of ...

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security

AI has fundamentally raised the stakes for security operations, and this three-part series is your guide to ...